Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/vodD5q0fJ3uk77fq2WmiOczAUPQ.roa
File: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (raw, json)
Hash identifier: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=
Subject key identifier: BE:87:43:E6:AD:1F:27:7B:A4:EF:B7:EA:D9:69:A2:39:CC:C0:50:F4
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 019423D6B2981B7DFE30A9148223D5AABEF8
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/vodD5q0fJ3uk77fq2WmiOczAUPQ.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34562
IP address blocks: 91.217.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b2:98:1b:7d:fe:30:a9:14:82:23:d5:aa:be:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be8743e6ad1f277ba4efb7ead969a239ccc050f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:46:65:b4:19:77:88:9d:a7:bb:e8:4e:c3:
1f:a9:6d:ed:e9:86:d1:9b:a0:99:9e:29:d1:f1:c7:
15:2d:1d:19:88:ed:5f:39:4e:7a:eb:03:c4:86:21:
31:37:a8:be:2f:b3:5e:b6:37:8a:b4:64:a4:67:ff:
7c:d8:1b:97:84:16:6c:08:32:17:6c:c7:18:a3:6a:
d3:48:42:6f:79:ff:43:42:c5:19:ff:35:f7:67:5c:
5c:d4:c3:dd:da:21:b1:57:7b:75:72:6c:61:f7:d2:
fa:4c:13:4e:fd:e7:e4:86:e4:9d:e8:5d:40:17:5b:
cc:8b:39:d1:98:ea:04:a4:85:95:10:22:51:96:e7:
9e:ec:47:11:29:07:14:6f:d6:c1:d8:f2:38:f2:3b:
a8:2d:6d:85:69:5c:d2:b5:f6:1c:c0:63:65:14:4c:
2f:f4:bf:17:17:b9:9e:64:d1:3f:63:99:13:8c:87:
6d:9c:ea:f8:b2:5d:94:e3:63:4d:d7:6d:33:88:63:
80:21:20:3d:88:48:3d:35:7e:7f:20:8a:06:29:3c:
4c:5b:19:21:62:61:f6:95:a1:8e:a6:46:5d:bf:b8:
64:26:f0:1c:a8:26:a9:49:33:af:ab:e0:a8:9a:8d:
46:8d:19:d5:22:24:43:b4:a6:ac:b5:10:b9:00:1c:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:43:E6:AD:1F:27:7B:A4:EF:B7:EA:D9:69:A2:39:CC:C0:50:F4
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/vodD5q0fJ3uk77fq2WmiOczAUPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.235.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:64:95:a8:f4:d9:ca:7d:4a:82:f0:4c:e6:69:ac:29:8c:13:
3b:78:b8:86:06:63:dc:a3:e9:b2:be:ee:22:97:86:5a:7c:b7:
58:ce:09:db:2a:89:d2:1e:98:a2:45:9b:9e:91:d0:85:01:eb:
be:c3:66:dc:b6:40:49:da:28:2b:ed:fc:a4:47:aa:36:9b:c1:
b5:99:1c:42:73:82:6a:f7:a9:61:ac:0b:57:41:22:04:14:55:
a9:f1:e9:74:ae:61:43:64:b3:39:10:8a:5b:c8:26:43:b4:57:
2d:56:cc:0d:f5:bf:f5:df:ea:1b:16:51:73:e2:b1:c7:30:fb:
99:62:75:1f:69:b2:83:0f:e7:c1:04:2b:17:95:41:46:b0:10:
6c:1a:cd:cb:af:4a:dc:5d:f5:b0:13:6b:2d:3a:98:37:af:0c:
50:a9:90:5b:3c:30:13:97:70:06:71:d0:0b:ff:1d:45:21:ad:
03:da:de:1a:8c:4c:1a:dc:4f:eb:f8:b6:39:16:f3:a5:29:0a:
65:d5:e4:97:c1:eb:90:27:b4:1e:30:0b:a2:32:c6:c1:42:5e:
52:3b:c7:80:f1:93:a3:08:d3:0b:95:72:15:e8:95:17:29:f1:
74:0b:37:11:31:37:d0:3d:d6:03:74:94:18:67:db:ee:c9:90:
9f:64:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:29 2025 by rpki-client